[libvirt] [PATCH v2 0/3] virt-aa-helper: allow to add R/O files in restricted dirs

Guido Günther agx at sigxcpu.org
Fri Aug 21 13:31:59 UTC 2015


Hi,
the purpose of these patches is to make it possible to put
files in restricted_rw that are under a directory that is
already in restricted. It was only possible to add the to
overrides before so they ended up being rw.

Sorry for the incomplete series this morning, hopefully this looks better.  The
tests pass here and I've added an additional patch checking the new file.

Cheers,
 -- Guido

Guido Günther (2):
  virt-aa-helper: document --probing and --dry-run
  virt-aa-helper: Simplify restriction logic

intrigeri (1):
  virt-aa-helper: allow access to /usr/share/ovmf/

 src/security/virt-aa-helper.c | 34 ++++++++++++++++++++++------------
 tests/virt-aa-helper-test     |  9 +++++++++
 2 files changed, 31 insertions(+), 12 deletions(-)

-- 
2.1.4




More information about the libvir-list mailing list